diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 129e0a8..58ff67c 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13584,6 +13584,9 @@
         ],
         "ransomnotes-filenames": [
           "Cyborg_DECRYPT.txt"
+        ],
+        "ransomnotes-refs":[
+          "https://npercoco.typepad.com/.a/6a0133f264aa62970b0240a4ebff1b200b-pi"
         ]
       },
       "uuid": "0a0b9311-8cbc-4d97-b337-42c9a018ebe0",